They may not have the cachet of entrepreneurs, or geek chic of developers, but data protection officers are suddenly the hottest properties in technology.

When Jen Brown got her first certification for information privacy in 2006, few companies were looking for people qualified to manage the legal and ethical issues related to handling customer data.

But now it's 2018, companies across the globe are scrambling to comply with a European law that represents the biggest shake-up of personal data privacy rules since the birth of the internet - and Brown's inbox is being besieged by recruiters.

"I got into security before anyone cared about it, and I had a hard time finding a job," said the 46-year-old, who is the data protection officer (DPO) of analytics start-up Sumo Logic in Redwood City near San Francisco.

"Suddenly, people are sitting up and taking notice."

Brown is among a hitherto rare breed of workers who are becoming sought-after commodities in the global tech industry ahead of the European Union's General Data Protection Regulation (GDPR), which goes into effect in May.

The law is intended to give European citizens more control over their online information and applies to all firms that do business with Europeans. It requires that all companies whose core activities include substantial monitoring or processing of personal data hire a DPO.

And finding DPOs is not easy.

More than 28,000 will be needed in Europe and U.S. and as many as 75,000 around the globe as a result of GDPR, the International Association of Privacy Professionals (IAPP) estimates.

The organisation said it did not previously track DPO figures because, prior to GDPR, Germany and the Philippines were the only countries it was aware of with mandatory DPO laws.

DPO job listings in Britain on the Indeed job search site have increased by more than 700 percent over the past 18 months, from 12.7 listings per every one million in April 2016 to 102.7 listings per one million in December.

The need for DPOs is expected to be particularly high in any data-rich industries, such as tech, digital marketing, finance, healthcare and retail.

Uber, Twitter, Airbnb, Cloudflare and Experian are advertising for a DPO, online job advertisements show. Microsoft, Facebook, Salesforce.com and Slack are also currently working to fill the position, the companies told Reuters.

"I would say that I get between eight and 10 calls a week about a role (from recruiters)," said Marc French, DPO of Massachusetts email management company Mimecast. "Come 1 January the phone calls increased exponentially because everybody realised, 'Oh my god, GDPR is only five months away.'"

GDPR requires that DPOs assist their companies on data audits for compliance with privacy laws, train employees on data privacy and serve as the point of contact for European regulators.

Other provisions of the law require that companies make personal information available to customers on request, or delete it entirely in some cases, and report any data breaches within 72 hours.

On a typical day, French said he monitors for any guidance updates for GDPR, meets with Mimecast's engineering teams to discuss privacy in new product features, reviews the marketing team's data usage requests, works on privacy policy revisions and conducts one or two calls with clients to discuss the company's position on GDPR and privacy.

"Given that we're trying to march to the deadline, I would say that 65 percent of my time is focused on GDPR right now," said French, who is also a senior vice president of Mimecast.

The demand for DPOs has sparked renewed interest in data privacy training, said Sam Pfeifle, content director of the IAPP, which introduced a GDPR Ready program last year for aspiring DPOs.

"We already sold out all of our GDPR training through the first six months of 2018," said Pfeifle, adding that the IAPP saw a surge in new memberships in 2017, from 24,000 to 36,000.

Those companies who have DPOs, meanwhile, are braced for poaching.

Many of those firms reside in Germany, which has long required that most companies that process data designate DPOs. They include Simplaex, a Berlin ad-targeting startup.

"Everyone is looking for a DPO," said Simplaex CEO Jeffry van Ede. "I need to have some cash ready for when someone tries to take mine so I can keep him."

Distributor Directory

Vendor Directory

Featured

Slideshows

Bumper channel crowd kicks off first After Hours of 2018

After Hours made a welcome return to the channel social calendar with a bumper crowd of partners, distributors and vendors descending on The Jefferson in Auckland to kick-start 2018. Photos by Gino Demeer.

Looking back at the top 15 M&A deals in NZ during 2017

In 2017, merger and acquisitions fever reached new heights in New Zealand, with a host of big name deals dominating the headlines. Reseller News recaps the most important transactions of the Kiwi channel during the past 12 months.

Copyright 2018 IDG Communications. ABN 14 001 592 650. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.